[jdk17u-dev] Integrated: 8346587: Distrust TLS server certificates anchored by Camerfirma Root CAs

[Antonio Vieiro]

On Wed, 12 Feb 2025 14:33:03 GMT, Antonio Vieiro <duke at openjdk.org> wrote:

> Clean backport of [JDK-8346587](https://bugs.openjdk.org/browse/JDK-8346587) to distrust TLS server certificates issued after April 15, 2025 and anchored by Camerfirma Root CAs. Low risk.
> 
> On Linux it passes tier1 tests and also all jdk/sun/security tests:
> 
> 
> ==============================
> Test summary
> ==============================
>    TEST                                              TOTAL  PASS  FAIL ERROR   
>    jtreg:test/jdk/sun/security                         737   737     0     0   
> ==============================
> TEST SUCCESS

This pull request has now been integrated.

Changeset: f4bef2f2
Author:    Antonio Vieiro <avieirov at redhat.com>
Committer: Severin Gehwolf <sgehwolf at openjdk.org>
URL:       https://git.openjdk.org/jdk17u-dev/commit/f4bef2f24a9bb433b5693aa59bb81acac6b311f3
Stats:     392 lines in 8 files changed: 388 ins; 0 del; 4 mod

8346587: Distrust TLS server certificates anchored by Camerfirma Root CAs

Backport-of: eb824722c053608b779d3b8959ba218aceed6875

-------------

PR: https://git.openjdk.org/jdk17u-dev/pull/3276